| ▲ | righthand 21 hours ago | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
In my opinion this is not “we agree lets remove it”. This is “we agree to explore the idea”. Google and Freed using this as a go ahead because the Mozilla guy pasted a pollyfill. However it is very clearly NOT an endorsement to remove it, even though bad actors are stating so. > Our position is that it would be good for the long-term health of the web platform and good for user security to remove XSLT, and we support Chromium's effort to find out if it would be web compatible to remove support1. If it turns out that it's not possible to remove support, then we think browsers should make an effort to improve the fundamental security properties of XSLT even at the cost of performance. Freed et al also explicitly chose to ignore user feedback for their own decision and not even try to improve XSLT security issues at the cost of performance. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ▲ | TingPing 21 hours ago | parent [-] | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Last I heard for WebKit removing it was the only outcome they saw. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||